引导，CSP无法正常工作

Question

尝试在flask中为css创建CSP，如下所示。但图标不会显示。我做错了什么

@posts.after_request
def add_security_headers(resp):
    resp.headers['Content-Security-Policy']=('style-src \'self\' https://maxcdn.bootstrapcdn.com; \
        font-src https://use.fontawesome.com/releases/v5.5.0/css/all.css;\
        script-src \'self\' https://ajax.googleapis.com  https://code.jquery.com  https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com;')
    return resp

Answer 1

<script defer src="/assets/fa/js/brands.js"></script>
<script defer src="/assets/fa/js/solid.js"></script>
<script defer src="/assets/fa/js/fontawesome.js"></script>

为Font5使用js库。 附加设置将类似于此

            <div class="col-lg-4 col-6 p-1 px-2">
                <i class="fab fa-instagram fa-2x"></i>
                <a href="https://www.instagram.com">instagram</a>  
            </div>

            <div class="col-lg-4 col-6 p-1 px-2">
                <i class="fab fa-whatsapp-square fa-2x"></i>
                <a href="whatsapp://">whatsapp</a>  
            </div>

请注意，fab类代表令人敬畏的字体品牌，fas代表令人敬畏的字体实体